Noma Labs Discovers Critical Vulnerability in Widely Adopted Open Source AI Agent Platform Ruflo

Security firm Noma Labs has discovered a critical remote code execution (RCE) vulnerability in the widely used open-source AI agent platform, Ruflo. The flaw (CVE-2026-88795) allows an attacker to bypass the platform's sandbox, putting applications built on the framework at risk.

This Wire brief sits within Fusion42's coverage of AI & ML. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.